super virus--worm

[weepforit]

so......norton killed itself, and i installed AVG because i was certain that there were viruses on my computer. sure enough, there were THOUSANDS. i got rid of most of them, but there's this one virus that won't die. and it MULTIPLIES. there was one or two of them, but now there are like 80, of the same virus. it's called worm/Padobot.g in c:\wondows\system32\ftpupd.exe. and it WILL NOT GO AWAY. AVG continues to detect it, but cannot heal it and cannot move it to virus vault. and i think it is slowly eating my computer....it is getting really slow and certain programs will stop working for no real reason.... HELP

 

[twotugs]

http://www.f-secure.com/v-descs/korgo_p.shtml

 

[xgerryx]

If you have Windows ME or XP you will have to disable system restore before virus scanning. For details, have a look here: http://www.pchell.com/virus/systemrestore.shtml

 

[mimo2005]

i received your email ,DISABLE your antivirus and run it again ,you should be able to remove it , and make sure your system restore is off in case its backed up .after all done ,rescan with your AV ,to check is the beast is really dead .

 

[physician]

so......norton killed itself, and i installed AVG because i was certain that there were viruses on my computer. sure enough, there were THOUSANDS. i got rid of most of them, but there's this one virus that won't die. and it MULTIPLIES. there was one or two of them, but now there are like 80, of the same virus. it's called worm/Padobot.g in c:\wondows\system32\ftpupd.exe. and it WILL NOT GO AWAY. AVG continues to detect it, but cannot heal it and cannot move it to virus vault. and i think it is slowly eating my computer....it is getting really slow and certain programs will stop working for no real reason.... HELP

http://www.f-secure.com/v-descs/korgo.shtml
http://www.viruslist.com/eng/viruslist.html?id=1562410

Its a bad bug and these worms are not always removed by antivirus programs. There are tools out there that can do it, but one of the best things to do is to download hijack this, post the log here on the security forum and let one of the experts help you with it...doc

 

[weepforit]

when i use this, http://www.f-secure.com/v-descs/korgo.shtml, it tells me that there is no infection found. i think that's because when i used tds-3, it said that there were locked files, and that's where the virus is. so now i just need to unlock those files and then i can KILL THEM!! now if only i knew how...

 

[mimo2005]

it s because you have 2 antivirus running and locking that pest ,thats why you can not remove it using tds 3 .
unload the AV , TURN IT OFF ,then scan with tds ,good luck.
by the way 2 antivirus in same machine is nonesens.
remove norton with this
http://service1.symantec.com/SUPPORT/nav.nsf/docid/2001092114452606